@cursor/bdk 0.2.9 → 0.2.10

package/dist/internal/http-channel.js

@@ -9,15 +9,6 @@
  * id (including custom channels such as `drive`) when the token matches its
  * active HTTP follow-up key; task sessions stay fire-and-forget.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { samePrincipal } from "./auth.js";
 import { formatContinuationToken, parseContinuationToken } from "./ids.js";
 import { isRecord } from "./is-record.js";
@@ -26,54 +17,59 @@ import { ApprovalInterruptedError, ApprovalNotFoundError, AuthInterruptedError,
 import { eventsUrlForSession, playgroundUrlForSession } from "./session-urls.js";
 const SESSION_ID_HEADER = "x-agent-serve-session-id";
 export function buildHttpChannelRoutes(args) {
-    var _a, _b, _c, _d;
     const { engine, config, auth } = args;
-    const base = (_a = args.basePath) !== null && _a !== void 0 ? _a : "";
-    const relaxSessionReadAuth = (_b = args.relaxSessionReadAuth) !== null && _b !== void 0 ? _b : false;
-    const relaxSessionReadAuthBeyondLoopback = (_c = args.relaxSessionReadAuthBeyondLoopback) !== null && _c !== void 0 ? _c : false;
-    const relaxSessionApprovalAuth = (_d = args.relaxSessionApprovalAuth) !== null && _d !== void 0 ? _d : false;
-    const transformMessage = (message, authContext) => __awaiter(this, void 0, void 0, function* () {
+    const base = args.basePath ?? "";
+    const relaxSessionReadAuth = args.relaxSessionReadAuth ?? false;
+    const relaxSessionReadAuthBeyondLoopback = args.relaxSessionReadAuthBeyondLoopback ?? false;
+    const relaxSessionApprovalAuth = args.relaxSessionApprovalAuth ?? false;
+    const transformMessage = async (message, authContext) => {
         if (config.onMessage === undefined) {
             return message;
         }
         return config.onMessage(message, { auth: authContext });
-    });
+    };
     const createSession = {
         method: "POST",
         pattern: `${base}/v1/session`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const body = yield readJsonObject(request);
+        handler: async (request, ctx) => {
+            const body = await readJsonObject(request);
             if (body === undefined || typeof body.message !== "string") {
                 return errorResponse(400, "invalid_request", "Expected a JSON body with a string `message`.");
             }
             if (body.asOf !== undefined && typeof body.asOf !== "string") {
                 return errorResponse(400, "invalid_request", "`asOf` must be an ISO-8601 instant with a timezone when provided.");
             }
-            const message = yield transformMessage(body.message, ctx.auth);
+            const message = await transformMessage(body.message, ctx.auth);
             const workspaceFiles = readWorkspaceFiles(body.workspaceFiles);
             // Per-session cloud attach (create only). Eval harness uses this to pin
             // fixture repos without putting them on the agent's default cloud.repos.
             const cloud = readCloudOptions(body.cloud);
-            const session = yield engine.send(HTTP_CHANNEL_ID, message, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ auth: ctx.auth }, (typeof body.title === "string" ? { title: body.title } : {})), (body.purpose === "eval" ? { purpose: "eval" } : {})), (body.dryRun === true ? { dryRun: true } : {})), { asOf: body.asOf }), (workspaceFiles === undefined ? {} : { workspaceFiles })), (cloud === undefined ? {} : { cloud })));
+            const session = await engine.send(HTTP_CHANNEL_ID, message, {
+                auth: ctx.auth,
+                ...(typeof body.title === "string" ? { title: body.title } : {}),
+                ...(body.purpose === "eval" ? { purpose: "eval" } : {}),
+                ...(body.dryRun === true ? { dryRun: true } : {}),
+                asOf: body.asOf,
+                ...(workspaceFiles === undefined ? {} : { workspaceFiles }),
+                ...(cloud === undefined ? {} : { cloud }),
+            });
             return jsonResponse({
                 ok: true,
                 sessionId: session.id,
-                continuationToken: formatContinuationToken(HTTP_CHANNEL_ID, (_a = session.continuationToken) !== null && _a !== void 0 ? _a : ""),
+                continuationToken: formatContinuationToken(HTTP_CHANNEL_ID, session.continuationToken ?? ""),
                 playgroundUrl: playgroundUrlForSession(request, base, session.id),
                 traceUrl: eventsUrlForSession(request.url, base, session.id),
             }, { headers: { [SESSION_ID_HEADER]: session.id } });
-        }),
+        },
     };
     const followUp = {
         method: "POST",
         pattern: `${base}/v1/session/:sessionId`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -90,7 +86,7 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const body = yield readJsonObject(request);
+            const body = await readJsonObject(request);
             if (body === undefined || typeof body.message !== "string") {
                 return errorResponse(400, "invalid_request", "Expected a JSON body with a string `message`.");
             }
@@ -101,8 +97,8 @@ export function buildHttpChannelRoutes(args) {
             if (presented === null) {
                 return errorResponse(409, "stale_continuation_token", "The continuation token does not address this session's active continuation.");
             }
-            const message = yield transformMessage(body.message, ctx.auth);
-            const rotated = yield engine.followUpHttp(sessionId, presented, message);
+            const message = await transformMessage(body.message, ctx.auth);
+            const rotated = await engine.followUpHttp(sessionId, presented, message);
             if (rotated === undefined) {
                 return errorResponse(409, "stale_continuation_token", "The continuation token does not address this session's active continuation.");
             }
@@ -111,22 +107,21 @@ export function buildHttpChannelRoutes(args) {
                 sessionId,
                 continuationToken: formatContinuationToken(HTTP_CHANNEL_ID, rotated),
             }, { headers: { [SESSION_ID_HEADER]: sessionId } });
-        }),
+        },
     };
     const stream = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/stream`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
+        handler: async (request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
             // The stream-and-inspect handle is runtime-owned: sessions started by
             // custom channels or schedules are observable here too when the caller
             // matches the session's stored principal (or `--dev` relax). Follow-ups
             // use the same ownership gate plus the session's continuation token.
             // Lazy-restore by id so playground Open-trace works after redeploy
             // when the session is durable but not in the local state root yet.
-            const record = yield engine.getOrRestoreSession(sessionId);
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -144,7 +139,7 @@ export function buildHttpChannelRoutes(args) {
             if (Number.isNaN(startIndex) || startIndex < 0) {
                 return errorResponse(400, "invalid_request", "startIndex must be a non-negative integer.");
             }
-            const body = yield engine.eventStream(sessionId, startIndex);
+            const body = await engine.eventStream(sessionId, startIndex);
             return new Response(body, {
                 status: 200,
                 headers: {
@@ -153,17 +148,16 @@ export function buildHttpChannelRoutes(args) {
                     [SESSION_ID_HEADER]: sessionId,
                 },
             });
-        }),
+        },
     };
     /** One-shot NDJSON (or JSON) dump of the session trace. */
     const events = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/events`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -177,7 +171,7 @@ export function buildHttpChannelRoutes(args) {
             }
             const url = new URL(request.url);
             const asJson = url.searchParams.get("format") === "json";
-            const snapshot = yield engine.listEvents(sessionId, 0, {
+            const snapshot = await engine.listEvents(sessionId, 0, {
                 backfillCloudCost: true,
             });
             if (asJson) {
@@ -197,16 +191,15 @@ export function buildHttpChannelRoutes(args) {
                     [SESSION_ID_HEADER]: sessionId,
                 },
             });
-        }),
+        },
     };
     const cost = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/cost`,
         auth,
-        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (_request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -218,20 +211,19 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const payload = yield engine.sessionCost(sessionId);
+            const payload = await engine.sessionCost(sessionId);
             return jsonResponse(payload, {
                 headers: { [SESSION_ID_HEADER]: sessionId },
             });
-        }),
+        },
     };
     const listApprovals = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/approvals`,
         auth,
-        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (_request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -243,25 +235,23 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const pending = yield engine.listPendingApprovals(sessionId);
+            const pending = await engine.listPendingApprovals(sessionId);
             return jsonResponse({ ok: true, sessionId, pending });
-        }),
+        },
     };
     const resolveApproval = {
         method: "POST",
         pattern: `${base}/v1/session/:sessionId/approvals/:callId`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            var _b, _c;
-            const sessionId = (_b = ctx.params.sessionId) !== null && _b !== void 0 ? _b : "";
-            const callId = (_c = ctx.params.callId) !== null && _c !== void 0 ? _c : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const callId = ctx.params.callId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
             const bridgeSlackApproval = relaxSessionApprovalAuth === true &&
-                ((_a = record.auth) === null || _a === void 0 ? void 0 : _a.authenticator) === "slack" &&
+                record.auth?.authenticator === "slack" &&
                 (relaxSessionReadAuthBeyondLoopback === true ||
                     (typeof ctx.requestIp === "string" && isLoopbackAddress(ctx.requestIp)));
             const ownership = requireSessionOwner(record, ctx.auth, {
@@ -274,13 +264,13 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const body = yield readJsonObject(request);
-            const decision = body === null || body === void 0 ? void 0 : body.decision;
+            const body = await readJsonObject(request);
+            const decision = body?.decision;
             if (decision !== "approve" && decision !== "deny") {
                 return errorResponse(400, "invalid_request", 'Expected a JSON body with `decision`: "approve" | "deny".');
             }
             try {
-                const pending = yield engine.resolveApproval(sessionId, callId, decision, ctx.auth, bridgeSlackApproval ? { asSessionOwner: true } : undefined);
+                const pending = await engine.resolveApproval(sessionId, callId, decision, ctx.auth, bridgeSlackApproval ? { asSessionOwner: true } : undefined);
                 return jsonResponse({
                     ok: true,
                     sessionId,
@@ -301,16 +291,15 @@ export function buildHttpChannelRoutes(args) {
                 }
                 throw error;
             }
-        }),
+        },
     };
     const stop = {
         method: "POST",
         pattern: `${base}/v1/session/:sessionId/stop`,
         auth,
-        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (_request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -322,18 +311,17 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const interrupted = yield engine.interrupt(sessionId);
+            const interrupted = await engine.interrupt(sessionId);
             return jsonResponse({ ok: true, interrupted }, { headers: { [SESSION_ID_HEADER]: sessionId } });
-        }),
+        },
     };
     const listAuths = {
         method: "GET",
         pattern: `${base}/v1/session/:sessionId/auths`,
         auth,
-        handler: (_request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const sessionId = (_a = ctx.params.sessionId) !== null && _a !== void 0 ? _a : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (_request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
@@ -345,25 +333,23 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const pending = yield engine.listPendingAuths(sessionId);
+            const pending = await engine.listPendingAuths(sessionId);
             return jsonResponse({ ok: true, sessionId, pending });
-        }),
+        },
     };
     const resolveAuth = {
         method: "POST",
         pattern: `${base}/v1/session/:sessionId/auths/:callId`,
         auth,
-        handler: (request, ctx) => __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            var _b, _c;
-            const sessionId = (_b = ctx.params.sessionId) !== null && _b !== void 0 ? _b : "";
-            const callId = (_c = ctx.params.callId) !== null && _c !== void 0 ? _c : "";
-            const record = yield engine.getOrRestoreSession(sessionId);
+        handler: async (request, ctx) => {
+            const sessionId = ctx.params.sessionId ?? "";
+            const callId = ctx.params.callId ?? "";
+            const record = await engine.getOrRestoreSession(sessionId);
             if (record === undefined) {
                 return errorResponse(404, "session_not_found", `Unknown session ${sessionId}.`);
             }
             const bridgeSlackAuth = relaxSessionApprovalAuth === true &&
-                ((_a = record.auth) === null || _a === void 0 ? void 0 : _a.authenticator) === "slack" &&
+                record.auth?.authenticator === "slack" &&
                 (relaxSessionReadAuthBeyondLoopback === true ||
                     (typeof ctx.requestIp === "string" && isLoopbackAddress(ctx.requestIp)));
             const ownership = requireSessionOwner(record, ctx.auth, {
@@ -374,13 +360,13 @@ export function buildHttpChannelRoutes(args) {
             if (ownership !== undefined) {
                 return ownership;
             }
-            const body = yield readJsonObject(request);
-            const decision = body === null || body === void 0 ? void 0 : body.decision;
+            const body = await readJsonObject(request);
+            const decision = body?.decision;
             if (decision !== "approve" && decision !== "deny") {
                 return errorResponse(400, "invalid_request", 'Expected a JSON body with `decision`: "approve" | "deny".');
             }
             try {
-                const pending = yield engine.resolveAuth(sessionId, callId, decision, ctx.auth, bridgeSlackAuth ? { asSessionOwner: true } : undefined);
+                const pending = await engine.resolveAuth(sessionId, callId, decision, ctx.auth, bridgeSlackAuth ? { asSessionOwner: true } : undefined);
                 return jsonResponse({
                     ok: true,
                     sessionId,
@@ -401,7 +387,7 @@ export function buildHttpChannelRoutes(args) {
                 }
                 throw error;
             }
-        }),
+        },
     };
     return [
         createSession,
@@ -420,7 +406,7 @@ export function requireSessionOwner(record, caller, options) {
     // Dev playground lists every session (`includeAll`); match that by
     // allowing cross-principal read/follow-up. Loopback-only unless
     // `--allow-anonymous` also opted into beyondLoopback.
-    const relaxOwnership = (options === null || options === void 0 ? void 0 : options.relax) === true &&
+    const relaxOwnership = options?.relax === true &&
         (options.beyondLoopback === true ||
             (typeof options.requestIp === "string" && isLoopbackAddress(options.requestIp)));
     if (relaxOwnership || samePrincipal(record.auth, caller)) {
@@ -429,10 +415,12 @@ export function requireSessionOwner(record, caller, options) {
     return errorResponse(403, "forbidden", "This session belongs to a different principal.");
 }
 export function jsonResponse(data, init = {}) {
-    var _a;
     return new Response(JSON.stringify(data), {
-        status: (_a = init.status) !== null && _a !== void 0 ? _a : 200,
-        headers: Object.assign({ "content-type": "application/json; charset=utf-8" }, init.headers),
+        status: init.status ?? 200,
+        headers: {
+            "content-type": "application/json; charset=utf-8",
+            ...init.headers,
+        },
     });
 }
 export function errorResponse(status, code, message) {
@@ -481,7 +469,11 @@ function readCloudOptions(value) {
             if (!isRecord(entry) || typeof entry.url !== "string" || entry.url === "") {
                 continue;
             }
-            repos.push(Object.assign(Object.assign({ url: entry.url }, (typeof entry.startingRef === "string" ? { startingRef: entry.startingRef } : {})), (typeof entry.prUrl === "string" ? { prUrl: entry.prUrl } : {})));
+            repos.push({
+                url: entry.url,
+                ...(typeof entry.startingRef === "string" ? { startingRef: entry.startingRef } : {}),
+                ...(typeof entry.prUrl === "string" ? { prUrl: entry.prUrl } : {}),
+            });
         }
         if (repos.length > 0) {
             cloud.repos = repos;
@@ -510,25 +502,22 @@ function readCloudOptions(value) {
     return Object.keys(cloud).length === 0 ? undefined : cloud;
 }
 /** Parse a JSON object body. Requires `application/json` (CORS-simple types do not parse). */
-export function readJsonObject(request) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const contentType = request.headers.get("content-type");
-        if (contentType === null || !isApplicationJson(contentType)) {
-            return undefined;
-        }
-        try {
-            const parsed = yield request.json();
-            if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
-                return parsed;
-            }
-            return undefined;
-        }
-        catch (_a) {
-            return undefined;
+export async function readJsonObject(request) {
+    const contentType = request.headers.get("content-type");
+    if (contentType === null || !isApplicationJson(contentType)) {
+        return undefined;
+    }
+    try {
+        const parsed = await request.json();
+        if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
+            return parsed;
         }
-    });
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 function isApplicationJson(contentType) {
-    var _a;
-    return ((_a = contentType.split(";", 1)[0]) === null || _a === void 0 ? void 0 : _a.trim().toLowerCase()) === "application/json";
+    return contentType.split(";", 1)[0]?.trim().toLowerCase() === "application/json";
 }

package/dist/internal/http-control-plane-session.d.ts

@@ -8,13 +8,23 @@
  * execution (never through this payload), so authored code cannot pick
  * one. {@link HttpChannelDefinition.onAdmit} runs against the mailbox
  * key and the original message before that send is captured.
+ *
+ * `agentsdk.eval-case` reserves the session's send for one eval case: the
+ * hosted execution runs the case body there instead of a single turn. The
+ * case body writes every message, so it skips `onAdmit` and `onMessage`.
  */
-import type { ChannelHandlerArgs, HttpChannelDefinition } from "../types.js";
+import type { ChannelHandlerArgs, HttpChannelDefinition, SendMessageOptions } from "../types.js";
 export type ControlPlaneSessionPayload = {
     message: string;
     dryRun?: boolean | undefined;
     asOf?: string | undefined;
 };
+export type EvalCaseRef = {
+    runId: string;
+    caseId: string;
+};
+/** The eval case an `agentsdk.eval-case` admission reserved this send for. */
+export declare function evalCaseOf(options: SendMessageOptions): EvalCaseRef | undefined;
 export declare function parseControlPlaneSessionPayload(payload: unknown): {
     ok: true;
     data: ControlPlaneSessionPayload;
@@ -22,6 +32,13 @@ export declare function parseControlPlaneSessionPayload(payload: unknown): {
     ok: false;
     error: string;
 };
+export declare function parseControlPlaneEvalCasePayload(payload: unknown): {
+    ok: true;
+    data: EvalCaseRef;
+} | {
+    ok: false;
+    error: string;
+};
 export declare function dispatchHttpControlPlaneSession(input: {
     eventType: string;
     payload: unknown;

package/dist/internal/http-control-plane-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-control-plane-session.d.ts","sourceRoot":"","sources":["../../src/internal/http-control-plane-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAS7E,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,CAAC;AAKF,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,0BAA0B,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA4B/E;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;CAC5C,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyBpB;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAavF"}
+{"version":3,"file":"http-control-plane-session.d.ts","sourceRoot":"","sources":["../../src/internal/http-control-plane-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAUjG,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAY5D,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,GAAG,SAAS,CAE/E;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,0BAA0B,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA4B/E;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAiBhE;AAeD,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;CAC5C,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4BpB;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAavF"}

package/dist/internal/http-control-plane-session.js

@@ -8,22 +8,25 @@
  * execution (never through this payload), so authored code cannot pick
  * one. {@link HttpChannelDefinition.onAdmit} runs against the mailbox
  * key and the original message before that send is captured.
+ *
+ * `agentsdk.eval-case` reserves the session's send for one eval case: the
+ * hosted execution runs the case body there instead of a single turn. The
+ * case body writes every message, so it skips `onAdmit` and `onMessage`.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { skipped, turnStarted } from "./channel-dispatch.js";
 import { attachHostedAdmissionAdapter } from "./hosted-admission-adapter.js";
-import { AGENT_SDK_HTTP_CHANNEL_KIND, AGENT_SDK_SESSION_EVENT_TYPE, } from "./hosted-catch-protocol.js";
+import { AGENT_SDK_EVAL_CASE_EVENT_TYPE, AGENT_SDK_HTTP_CHANNEL_KIND, AGENT_SDK_SESSION_EVENT_TYPE, } from "./hosted-catch-protocol.js";
 import { isRecord } from "./is-record.js";
 const PAYLOAD_KEYS = new Set(["message", "dryRun", "asOf"]);
+const EVAL_CASE_PAYLOAD_KEYS = new Set(["runId", "caseId"]);
 const MAX_MESSAGE_CHARS = 64 * 1024;
+const MAX_EVAL_ID_CHARS = 512;
+/** Symbol-keyed so authored channels cannot forge an eval-case send. */
+const EVAL_CASE = Symbol("agentsdk.eval-case");
+/** The eval case an `agentsdk.eval-case` admission reserved this send for. */
+export function evalCaseOf(options) {
+    return options[EVAL_CASE];
+}
 export function parseControlPlaneSessionPayload(payload) {
     if (!isRecord(payload)) {
         return { ok: false, error: "payload must be an object" };
@@ -51,32 +54,63 @@ export function parseControlPlaneSessionPayload(payload) {
         },
     };
 }
-export function dispatchHttpControlPlaneSession(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (input.eventType !== AGENT_SDK_SESSION_EVENT_TYPE) {
-            return skipped("not a control-plane session");
-        }
-        const parsed = parseControlPlaneSessionPayload(input.payload);
-        if (!parsed.ok) {
-            return Response.json({ ok: false, error: parsed.error }, { status: 400 });
-        }
-        const original = parsed.data.message;
-        if (input.onAdmit !== undefined) {
-            yield input.onAdmit({
-                message: original,
-                sessionKey: input.mailboxContinuationKey,
-                dryRun: parsed.data.dryRun,
-                asOf: parsed.data.asOf,
-                host: input.args.host,
-            });
+export function parseControlPlaneEvalCasePayload(payload) {
+    if (!isRecord(payload)) {
+        return { ok: false, error: "payload must be an object" };
+    }
+    if (Object.keys(payload).some(key => !EVAL_CASE_PAYLOAD_KEYS.has(key))) {
+        return { ok: false, error: "payload carries an unsupported field" };
+    }
+    for (const key of ["runId", "caseId"]) {
+        const value = payload[key];
+        if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVAL_ID_CHARS) {
+            return { ok: false, error: `payload.${key} is required` };
         }
-        const message = input.onMessage === undefined ? original : yield input.onMessage(original, { auth: null });
-        const session = yield input.args.send(message, {
+    }
+    return {
+        ok: true,
+        data: { runId: payload.runId, caseId: payload.caseId },
+    };
+}
+async function dispatchEvalCase(payload, args) {
+    const parsed = parseControlPlaneEvalCasePayload(payload);
+    if (!parsed.ok) {
+        return Response.json({ ok: false, error: parsed.error }, { status: 400 });
+    }
+    const options = {
+        purpose: "eval",
+        title: `Eval ${parsed.data.caseId}`,
+        [EVAL_CASE]: parsed.data,
+    };
+    return turnStarted(await args.send(parsed.data.caseId, options));
+}
+export async function dispatchHttpControlPlaneSession(input) {
+    if (input.eventType === AGENT_SDK_EVAL_CASE_EVENT_TYPE) {
+        return dispatchEvalCase(input.payload, input.args);
+    }
+    if (input.eventType !== AGENT_SDK_SESSION_EVENT_TYPE) {
+        return skipped("not a control-plane session");
+    }
+    const parsed = parseControlPlaneSessionPayload(input.payload);
+    if (!parsed.ok) {
+        return Response.json({ ok: false, error: parsed.error }, { status: 400 });
+    }
+    const original = parsed.data.message;
+    if (input.onAdmit !== undefined) {
+        await input.onAdmit({
+            message: original,
+            sessionKey: input.mailboxContinuationKey,
             dryRun: parsed.data.dryRun,
             asOf: parsed.data.asOf,
+            host: input.args.host,
         });
-        return turnStarted(session);
+    }
+    const message = input.onMessage === undefined ? original : await input.onMessage(original, { auth: null });
+    const session = await input.args.send(message, {
+        dryRun: parsed.data.dryRun,
+        asOf: parsed.data.asOf,
     });
+    return turnStarted(session);
 }
 export function attachHttpControlPlaneAdmission(definition) {
     attachHostedAdmissionAdapter(definition, {
@@ -85,7 +119,7 @@ export function attachHttpControlPlaneAdmission(definition) {
             eventType,
             payload,
             args,
-            mailboxContinuationKey: mailboxContinuationKey !== null && mailboxContinuationKey !== void 0 ? mailboxContinuationKey : "",
+            mailboxContinuationKey: mailboxContinuationKey ?? "",
             onMessage: definition.onMessage,
             onAdmit: definition.onAdmit,
         }),

package/dist/internal/incoming-headers-to-fetch.js

@@ -36,6 +36,5 @@ function firstHeaderValue(value) {
 }
 /** HTTP/1 `Host`, or HTTP/2 `:authority` when Host was not copied. */
 export function incomingRequestHost(headers, fallback = "127.0.0.1") {
-    var _a, _b;
-    return (_b = (_a = firstHeaderValue(headers.host)) !== null && _a !== void 0 ? _a : firstHeaderValue(headers[":authority"])) !== null && _b !== void 0 ? _b : fallback;
+    return firstHeaderValue(headers.host) ?? firstHeaderValue(headers[":authority"]) ?? fallback;
 }